Voluntary Application Server Identification (VAPID) for Web Push
RFC 8292

Revision differences

Document history

Date Rev. By Action
2017-11-29
04 (System) IANA registries were updated to include RFC8292
2017-11-29
04 (System)
Received changes through RFC Editor sync (created alias RFC 8292, changed abstract to 'An application server can use the Voluntary Application Server Identification (VAPID) method ...
2017-11-29
04 (System) RFC published
2017-11-28
04 (System) RFC Editor state changed to AUTH48-DONE from AUTH48
2017-11-20
04 (System) RFC Editor state changed to AUTH48 from RFC-EDITOR
2017-11-16
04 (System) RFC Editor state changed to RFC-EDITOR from REF
2017-11-14
04 (System) RFC Editor state changed to REF from EDIT
2017-10-20
04 (System) RFC Editor state changed to EDIT
2017-10-20
04 (System) IESG state changed to RFC Ed Queue from Approved-announcement sent
2017-10-20
04 (System) Announcement was received by RFC Editor
2017-10-19
04 (System) IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor
2017-10-19
04 (System) IANA Action state changed to Waiting on RFC Editor from In Progress
2017-10-19
04 (System) IANA Action state changed to In Progress from Waiting on Authors
2017-10-19
04 (System) IANA Action state changed to Waiting on Authors from In Progress
2017-10-19
04 (System) IANA Action state changed to In Progress
2017-10-19
04 Cindy Morgan IESG state changed to Approved-announcement sent from Approved-announcement to be sent
2017-10-19
04 Cindy Morgan IESG has approved the document
2017-10-19
04 Cindy Morgan Closed "Approve" ballot
2017-10-19
04 Cindy Morgan Ballot approval text was generated
2017-10-19
04 Adam Roach IESG state changed to Approved-announcement to be sent from IESG Evaluation::AD Followup
2017-10-11
04 Eric Rescorla
[Ballot comment]
UPDATED: I still think this is the wrong design but I'm persuaded that it's
not worth sending it back to the ...
2017-10-11
04 Eric Rescorla [Ballot Position Update] Position for Eric Rescorla has been changed to No Objection from Discuss
2017-09-03
04 (System) IANA Review state changed to Version Changed - Review Needed from IANA OK - Actions Needed
2017-09-03
04 Martin Thomson New version available: draft-ietf-webpush-vapid-04.txt
2017-09-03
04 (System) New version approved
2017-09-03
04 (System) Request for posting confirmation emailed to previous authors: Martin Thomson <martin.thomson@gmail.com>, Peter Beverloo <beverloo@google.com>
2017-09-03
04 Martin Thomson Uploaded new revision
2017-08-17
03 Cindy Morgan IESG state changed to IESG Evaluation::AD Followup from IESG Evaluation
2017-08-16
03 Ben Campbell [Ballot comment]
Thanks for addressing my DISCUSS and COMMENT points.
2017-08-16
03 Ben Campbell [Ballot Position Update] Position for Ben Campbell has been changed to Yes from Discuss
2017-08-15
03 Suresh Krishnan [Ballot Position Update] New position, No Objection, has been recorded for Suresh Krishnan
2017-08-15
03 Ben Campbell
[Ballot discuss]
In section 2: "A push service MAY reject a request with a 403 (Forbidden) status
code [RFC7235] if the JWT signature or its ...
2017-08-15
03 Ben Campbell
[Ballot comment]
Substantive:

I agree with Ekr's DISCUSS.

-3:
"This authentication scheme is intended for use by an application server
when using the Web ...
2017-08-15
03 Ben Campbell [Ballot Position Update] New position, Discuss, has been recorded for Ben Campbell
2017-08-15
03 Eric Rescorla
[Ballot discuss]
This design seems to have the unfortunate security property that the
JWT is really just a bearer token. The only reason it has ...
2017-08-15
03 Eric Rescorla
[Ballot comment]
Abstract
  This identification information can be used to restrict the use of a
  push subscription a single application server.

to a ...
2017-08-15
03 Eric Rescorla [Ballot Position Update] New position, Discuss, has been recorded for Eric Rescorla
2017-08-15
03 Kathleen Moriarty
[Ballot comment]
Thanks for your work on this draft.

In section 3, it seems that you are just signing the JWK and that seems fine ...
2017-08-15
03 Kathleen Moriarty [Ballot Position Update] New position, No Objection, has been recorded for Kathleen Moriarty
2017-08-15
03 Warren Kumari
[Ballot comment]
*Very* minor nits:

1: I'm reviewing both this document and draft-ietf-webpush-encryption (both of which have Martin Thomson as an author) -- these use ...
2017-08-15
03 Warren Kumari Ballot comment text updated for Warren Kumari
2017-08-15
03 Warren Kumari
[Ballot comment]
*Very* minor nits:

1: I'm reviewing both this document and draft-ietf-webpush-encryption (both of which have Martin Thomson as an author) -- these use ...
2017-08-15
03 Warren Kumari [Ballot Position Update] New position, No Objection, has been recorded for Warren Kumari
2017-08-15
03 Alexey Melnikov
[Ballot comment]
I have cleared my DISCUSS based on changes in git.

I am looking forward to continuing discussion about advertising support for the "vapid ...
2017-08-15
03 Alexey Melnikov [Ballot Position Update] Position for Alexey Melnikov has been changed to No Objection from Discuss
2017-08-15
03 Spencer Dawkins [Ballot Position Update] New position, No Objection, has been recorded for Spencer Dawkins
2017-08-15
03 Mirja Kühlewind
[Ballot comment]
Wondering if the new registry in section 6.2 is really needed. Is it expected that new parameters show up any time soon ...
2017-08-15
03 Mirja Kühlewind [Ballot Position Update] New position, No Objection, has been recorded for Mirja Kühlewind
2017-08-14
03 Deborah Brungard [Ballot Position Update] New position, No Objection, has been recorded for Deborah Brungard
2017-08-01
03 Alexey Melnikov
[Ballot discuss]
The following is a nit, but I think it is important that it gets fixed:

In Section 4.1:

  The example in ...
2017-08-01
03 Alexey Melnikov
[Ballot comment]
In Section 3, 3rd para:

  This authentication scheme does not require a challenge.  Clients are
  able to generate the Authorization ...
2017-08-01
03 Alexey Melnikov [Ballot Position Update] New position, Discuss, has been recorded for Alexey Melnikov
2017-08-01
03 Adam Roach IESG state changed to IESG Evaluation from Waiting for Writeup
2017-08-01
03 Adam Roach Ballot has been issued
2017-08-01
03 Adam Roach [Ballot Position Update] New position, Yes, has been recorded for Adam Roach
2017-08-01
03 Adam Roach Created "Approve" ballot
2017-08-01
03 Adam Roach Ballot writeup was changed
2017-07-11
03 Adam Roach Placed on agenda for telechat - 2017-08-17
2017-07-03
03 Stefan Winter Request for Last Call review by OPSDIR Completed: Has Issues. Reviewer: Stefan Winter. Sent review to list.
2017-07-03
03 (System) IESG state changed to Waiting for Writeup from In Last Call
2017-06-29
03 (System) IANA Review state changed to IANA OK - Actions Needed from IANA - Review Needed
2017-06-29
03 Sabrina Tanamal
(Via drafts-lastcall@iana.org): IESG/Authors/WG Chairs:

The IANA Services Operator has completed its review of draft-ietf-webpush-vapid-03.txt. If any part of this review ...
2017-06-28
03 Robert Sparks Request for Last Call review by SECDIR Completed: Has Nits. Reviewer: Robert Sparks. Sent review to list.
2017-06-24
03 Tero Kivinen Request for Last Call review by SECDIR is assigned to Robert Sparks
2017-06-24
03 Tero Kivinen Request for Last Call review by SECDIR is assigned to Robert Sparks
2017-06-24
03 Gunter Van de Velde Request for Last Call review by OPSDIR is assigned to Stefan Winter
2017-06-24
03 Gunter Van de Velde Request for Last Call review by OPSDIR is assigned to Stefan Winter
2017-06-22
03 Joel Halpern Request for Last Call review by GENART Completed: Ready. Reviewer: Joel Halpern. Sent review to list.
2017-06-22
03 Jean Mahoney Request for Last Call review by GENART is assigned to Joel Halpern
2017-06-22
03 Jean Mahoney Request for Last Call review by GENART is assigned to Joel Halpern
2017-06-19
03 Cindy Morgan IANA Review state changed to IANA - Review Needed
2017-06-19
03 Cindy Morgan
The following Last Call announcement was sent out:

From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
CC: adam@nostrum.com, draft-ietf-webpush-vapid@ietf ...
2017-06-19
03 Cindy Morgan IESG state changed to In Last Call from Last Call Requested
2017-06-19
03 Adam Roach Last call was requested
2017-06-19
03 Adam Roach Ballot approval text was generated
2017-06-19
03 Adam Roach Ballot writeup was generated
2017-06-19
03 Adam Roach IESG state changed to Last Call Requested from AD Evaluation::AD Followup
2017-06-19
03 Adam Roach Last call announcement was generated
2017-06-17
03 (System) Sub state has been changed to AD Followup from Revised ID Needed
2017-06-17
03 Martin Thomson New version available: draft-ietf-webpush-vapid-03.txt
2017-06-17
03 (System) New version approved
2017-06-17
03 (System) Request for posting confirmation emailed to previous authors: Martin Thomson <martin.thomson@gmail.com>, Peter Beverloo <beverloo@google.com>
2017-06-17
03 Martin Thomson Uploaded new revision
2017-06-16
02 Adam Roach IESG state changed to AD Evaluation::Revised I-D Needed from AD Evaluation
2017-06-13
02 Adam Roach IESG state changed to AD Evaluation from Publication Requested
2017-05-06
02 Phil Sorber A new version of the draft with non-substantive changes should be published soon to clear some nits.
2017-05-06
02 Phil Sorber
As required by RFC 4858, this is the current template for the Document
Shepherd Write-Up.

Changes are expected over time. This version is dated 24 ...
2017-05-06
02 Phil Sorber Responsible AD changed to Adam Roach
2017-05-06
02 Phil Sorber IETF WG state changed to Submitted to IESG for Publication from WG Consensus: Waiting for Write-Up
2017-05-06
02 Phil Sorber IESG state changed to Publication Requested
2017-05-06
02 Phil Sorber IESG process started in state Publication Requested
2017-05-06
02 Phil Sorber Changed document writeup
2017-04-25
02 Phil Sorber IETF WG state changed to WG Consensus: Waiting for Write-Up from WG Document
2017-04-25
02 Phil Sorber Notification list changed to Phil Sorber <sorber@apache.org>
2017-04-25
02 Phil Sorber Document shepherd changed to Phil Sorber
2017-04-16
02 Phil Sorber Changed consensus to Yes from Unknown
2017-04-16
02 Phil Sorber Intended Status changed to Proposed Standard from None
2016-12-21
02 Martin Thomson New version available: draft-ietf-webpush-vapid-02.txt
2016-12-21
02 (System) New version approved
2016-12-21
02 (System) Request for posting confirmation emailed to previous authors: "Martin Thomson" <martin.thomson@gmail.com>, "Peter Beverloo" <beverloo@google.com>
2016-12-21
02 Martin Thomson Uploaded new revision
2016-06-29
01 Martin Thomson New version available: draft-ietf-webpush-vapid-01.txt
2016-04-13
00 Martin Thomson New version available: draft-ietf-webpush-vapid-00.txt